Here's a piece of a script I use to generate pkcs12 files for usage with
Netscape and MSIE; hope this can help:
echo "Step 1: Key generation"
$basedir/openssl req -new -nodes -keyout $certsdir/newreq.pem -out
$certsdir/newreq.pem -config $baseCAdir/KEYpretest.cnf
echo
echo "Step 2: Public key certification(CA password requested)"
$basedir/openssl ca -policy policy_anything -out
$certsdir/newcert.pem -config $baseCAdir/KEYpretest.cnf -infiles
$certsdir/newreq.pem
echo
echo "Step 3: PKCS12 file generation"
$basedir/openssl pkcs12 -export -name "$nomefile" -password $password -in
$certsdir/newcert.pem -inkey $certsdir/newreq.pem -out
$certsdir/$nomefile.p12 -certfile $baseCAdir/cacert.pem
Bye,
dott. Stefano Bergamasco
Health Telematics Laboratory
University of Trieste
e-mail: [EMAIL PROTECTED]
----- Original Message -----
From: Rosario Riccio <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 03, 2000 10:54 AM
Subject: R: Certs for OutlookExpress and IE
>
> -----Messaggio originale-----
> Da: Peter Kim <[EMAIL PROTECTED]>
> A: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
> Data: mercoledì 2 agosto 2000 22.02
> Oggetto: Fw: Certs for OutlookExpress and IE
>
>
> >So, to answer your question directly, you can use openssl to create a
> certificate
> >in PEM format, for example, then create a PKCS12 format storing the newly
> >created certificate:
> >
> >openssl pkcs12 -export -in file.pem -out file.p12 -name "My Certificate"
> >
> >The example was taken directly from pkcs12 man page, so I hope that's
> right.
> >
>
> MMMMMHHHH.... I tried to do this, but IE5 don't accept this cert: it says
>
> " File Personal Information Exchange not valid" (this is a translation
from
> Italian!!!)
>
> Indeed, Netscape 4.7 ask me this:
>
> " Enter password protecting data to be imported: "
>
> I thought the password I used to export from PEM to P12 in
>
> >openssl pkcs12 -export -in file.pem -out file.p12 -name "My Certificate"
>
> but nothing. I have no Netscape password set for managing certificates in
> Security preferences. After this, Netscape tell me
>
> "Unable to import certificates. The file specified is either corrupt or is
> not a valid file"
>
> I tried with PKCS7 format.......NOTHING!!!
>
> What can I do? Give me a hope, please......
>
> Rosario Riccio
>
>
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
